Algorithms for provisioning virtual private networks in the hose model

Amit Kumar, Rajeev Rastogi, Avi Silberschatz, Bulent Yener
2001 Computer communication review  
Virtual Private Networks (VPNs) provide customers with predictable and secure network connections over a shared network. The recently proposed hose model for VPNs allows for greater exibility since it permits tra c to and from a hose endpoint to be arbitrarily distributed to other endpoints. In this paper, we develop novel algorithms for provisioning VPNs in the hose model. We connect VPN endpoints using a tree structure and our algorithms attempt to optimize the total bandwidth reserved on
more » ... dth reserved on edges of the VPN tree. We s h o w t h a t e v en for the simple scenario in which network links are assumed to have in nite capacity, the general problem of computing the optimal VPN tree is NPhard. Fortunately, for the special case when the ingress and egress bandwidths for each VPN endpoint are equal, we can devise an algorithm for computing the optimal tree whose time complexity i s O(mn), where m and n are the number of links and nodes in the network, respectively. W e present a novel integer programming formulation for the general VPN tree computation problem (that is, when ingress and egress bandwidths of VPN endpoints are arbitrary) and develop an algorithm that is based on the primal-dual method. Our experimental results with synthetic network graphs indicate that the VPN trees constructed by our proposed algorithms dramatically reduce bandwidth requirements (in many instances, by more than a factor of 2) compared to scenarios in which Steiner trees are employed to connect VPN endpoints.
doi:10.1145/964723.383070 fatcat:lnig3y3iijgvpn3sin4bcuxbqe